13543 2007-04-29 12:19:06 -0700 javascript: links don't honor the target attribute 2020-12-22 11:46:58 -0800 1 1 1 Unclassified WebKit Page Loading 523.x (Safari 3) Mac OS X 10.4 NEW P2 Normal --- 1 ggaren webkit-unassigned abarth bzbarsky ddkilzer masa141421356 rbuis oldest_to_newest 11810 0 ggaren 2007-04-29 12:19:06 -0700 Reduction coming. 11811 1 14269 ggaren 2007-04-29 12:19:28 -0700 Created attachment 14269 reduction 11812 2 ggaren 2007-04-29 12:21:29 -0700 I believe the problem is that the FrameLoader special-cases javascript: URLs to execute them, and the special-casing code ignores the target attribute. 11813 3 ggaren 2007-04-29 12:22:04 -0700 Works in Firefox. This is not a regression. 11814 4 14270 ggaren 2007-04-29 12:28:36 -0700 Created attachment 14270 better reduction 110221 5 abarth 2009-02-19 09:58:50 -0800 We should be careful to get the security checks right when we fix this bug. 110383 6 sharvani.bugzilla 2009-02-20 04:50:59 -0800 My observations are as follows, 1)In the API FrameLoader::urlSelected() I found that the case when there is a target attribute along with javascript, target is ignored. Here if the link is javascript then the script is executed and the control returns without considering the target attribute.The target attribute is considered only if its not a javascript. I tried the following, 1) Execute the javascript directly if the target is empty. 2) If the target is not empty then load the form and then execute the script in the new form. Now the safari is failing to load the URL on the target while doing navigation policy check. WebFrame::dispatchDecidePolicyForNavigationAction() { if (SUCCEEDED(policyDelegate->decidePolicyForNavigationAction(d->webView, actionInformation.get(), urlRequest.get(), this, setUpPolicyListener(function).get()))) return; } This check is failing. 132368 7 ap 2009-07-16 15:24:41 -0700 *** Bug 27326 has been marked as a duplicate of this bug. *** 726910 8 ap 2012-09-24 12:20:17 -0700 *** Bug 97351 has been marked as a duplicate of this bug. *** 1716295 9 rbuis 2020-12-22 11:46:58 -0800 Bug https://bugs.webkit.org/show_bug.cgi?id=174891 seems to be a duplicate of this, OTOH that one has a modern WPT test... 14269 2007-04-29 12:19:28 -0700 2007-04-29 12:28:36 -0700 reduction reduction.html text/html 253 ggaren PHA+Q2xpY2sgdGhlIHR3byBsaW5rcyBiZWxvdyBpbiBvcmRlci4gWW91IHNob3VsZCBzZWUgYW4g YWxlcnQgaW4gdGhlIGV4dGVybmFsIHdpbmRvdy48L3A+CjxhIGhyZWY9ImphdmFzY3JpcHQ6d2lu ZG93Lm9wZW4oJycsICdNeVdpbmRvdycpOyB2b2lkKDApOyI+b3BlbiB3aW5kb3c8L2E+CjxhIGhy ZWY9ImphdmFzY3JpcHQ6YWxlcnQoMCk7IHZvaWQoMCk7IiB0YXJnZXQ9Ik15V2luZG93Ij5hbGVy dCB0YXJnZXRlZCBhdCB3aW5kb3c8L2E+Cg== 14270 2007-04-29 12:28:36 -0700 2007-04-29 12:28:36 -0700 better reduction reduction.html text/html 318 ggaren PHA+Q2xpY2sgdGhlIHR3byBsaW5rcyBiZWxvdyBpbiBvcmRlci4gWW91IHNob3VsZCBzZWUgJ2hl bGxvIHdvcmxkJyBpbiBhbiBleHRlcm5hbCB3aW5kb3cuPC9wPgo8b2w+CjxsaT48YSBocmVmPSJq YXZhc2NyaXB0OndpbmRvdy5vcGVuKCcnLCAnTXlXaW5kb3cnKTsgdm9pZCgwKTsiPm9wZW4gZXh0 ZXJuYWwgd2luZG93PC9hPjwvbGk+CjxsaT48YSBocmVmPSJqYXZhc2NyaXB0OmRvY3VtZW50Lndy aXRlKCdoZWxsbyB3b3JsZCcpOyBkb2N1bWVudC5jbG9zZSgpIiB0YXJnZXQ9Ik15V2luZG93Ij53 cml0ZSB0byBleHRlcm5hbCB3aW5kb3c8L2E+PC9saT4K